Privacy Policy

Last revised: 9 March, 2023

1. Preamble

This policy is an addition to the Legal notice & Terms of use of the websites.

The data controller of the websites is ECNG Int OÜ (registration number 14438674), which adheres to the applicable regulations, in particular the European Regulation on personal data (EU 2016/679) (hereinafter the ‘GDPR’).

The policy is described below and may be modified at any time by ECNG. ECNG will not be held liable in any way whatsoever for the consequences of such modifications.

 

2. Management of your personal data

Whenever you contact ECNG by completing a form on our websites, the following mandatory data are collected: name, email, company / position, enquiry type, message and the technical information relating to the form filled in.

This data is collected so that we can respond to your enquiry and for commercial prospecting purposes. This processing is based on the legitimate interest of ECNG to ensure the development of its group.

 

3. Data recipients

The staff employed by ECNG as well as the subcontractors employed by ECNG insofar as necessary for the services they provide (maintenance, hosting, support, etc.), may have access to the data collected.

ECNG may also be required to disclose your personal data to a legal authority or any other governmental authority.

We ensure that each recipient abides by the appropriate security and confidentiality safeguards.

 

4. Security and confidentiality

ECNG has implemented and maintains the appropriate technical and organisational security measures to ensure a level of security adapted to the risk.

 

5. Transfer to third countries

In the event data is transferred to a country outside the European Union, ECNG shall establish the appropriate safeguards as required by the GDPR or ensure the third country has received a favourable adequacy decision from the European Commission. Where necessary, ECNG will carry out any formality required under the Regulation. The signing of standard contractual clauses is favoured.

ECNG may carry out such a transfer if (i) it is to an entity within its group which is established outside the European Union, and (ii) if ECNG has to share such information with third parties in order to supply the service you have requested.

 

6. Storage period

The storage period applicable to your personal data is based on the storage times provided for by law and regulations and based on the relevant type of data.

 

7. Rights of data subjects

Under the current regulations applicable on personal data, you have a right of access to your data, a right to rectify them and a right to portability. You can also place limits on how your data is processed, request their erasure or object to the processing by ECNG, you can also withdraw your consent to the data processing at any time.

You can exercise your rights or make an enquiry on the processing of your personal data by sending your request to our Data Protection Officer (DPO) at dpo@ecng.io. 

 

8. Severability

If one or more provisions of this privacy policy are held to be invalid or declared as such by virtue of statute or other legislative instrument or following a final decision by a competent court, such provision(s) will be deemed severed from the policy and all other provisions will remain valid and enforceable.

 

9. Definitions

Below are some definitions to help understand our policy:

Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

User means any person or entity accessing the website, including natural persons, legal persons or automated technologies (robots);

Personal Data means any information relating to an identified or identifiable natural person (hereinafter the ‘data subject’); an ‘identifiable natural person’ is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of said natural person.